Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/46joeL63mR2MGXxjfXpFM_EM7go.roa
File:                     46joeL63mR2MGXxjfXpFM_EM7go.roa (raw, json)
Hash identifier:          7RgZtpTPutYLskaEFpGPmtjDXFZ4NEvuC5Qb6tJnG08=
Subject key identifier:   E3:A8:E8:78:BE:B7:99:1D:8C:19:7C:63:7D:7A:45:33:F1:0C:EE:0A
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       01870474F916A03616C68D342567528DAB4F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/46joeL63mR2MGXxjfXpFM_EM7go.roa
Signing time:             Tue 21 Mar 2023 13:56:27 +0000
ROA not before:           Tue 21 Mar 2023 13:56:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60707
IP address blocks:        163.5.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:04:74:f9:16:a0:36:16:c6:8d:34:25:67:52:8d:ab:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Mar 21 13:56:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3a8e878beb7991d8c197c637d7a4533f10cee0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:17:07:9b:a4:46:0d:75:d3:e7:97:11:db:10:
                    cd:21:3e:b6:73:5b:7d:a9:cd:fe:ee:ca:d3:d5:9e:
                    a1:2f:b5:be:df:90:f0:4a:c6:57:f6:46:d4:52:7f:
                    96:1d:5d:97:57:6d:39:ec:52:47:0f:82:c3:48:07:
                    57:bc:ce:c8:22:21:66:ce:d8:eb:73:cc:dd:b3:d8:
                    54:78:df:b4:66:c5:a2:2d:8f:1a:0b:90:fd:18:13:
                    9b:b2:a0:c7:aa:5d:71:a4:52:45:1d:40:1a:b5:84:
                    3f:ad:ae:4c:77:b9:ab:c8:ea:1a:e5:aa:f8:e8:65:
                    87:d8:b7:89:98:7d:4f:8b:d4:e3:cf:06:20:c1:a8:
                    fd:29:f1:64:2a:04:4b:9a:aa:35:40:6e:17:4d:7b:
                    1d:bc:8c:5c:4f:c7:25:3a:1f:74:c5:b9:64:2d:5e:
                    27:97:6d:a4:f1:6b:51:a8:a8:0d:f1:0a:4a:37:84:
                    f3:63:28:a1:d7:93:fa:3f:a5:be:70:f1:3f:97:b4:
                    a0:7e:93:a8:58:bb:b8:d8:ce:72:d3:90:a4:16:d1:
                    28:c5:27:26:9e:25:d6:7b:78:96:0d:92:8e:c7:53:
                    69:9b:38:84:78:51:7c:4d:2f:15:0d:58:7c:96:15:
                    fa:23:f9:65:d4:5a:00:86:99:df:dc:fd:f0:ac:61:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A8:E8:78:BE:B7:99:1D:8C:19:7C:63:7D:7A:45:33:F1:0C:EE:0A
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/46joeL63mR2MGXxjfXpFM_EM7go.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:8d:1c:dc:7c:d6:8c:b3:0c:1a:37:8c:be:e2:94:e0:34:f7:
         01:b7:7c:6b:bd:a6:12:7a:80:33:f8:81:c8:f0:c7:0b:d2:a3:
         ae:1f:f0:dc:54:d3:1c:72:54:b6:3f:a4:3f:4b:66:a0:b3:0f:
         bf:32:f5:9c:1d:97:9c:41:c8:a5:51:42:12:60:da:53:9a:04:
         23:39:80:e6:6f:c1:0e:7d:17:20:75:a2:05:b1:42:53:5d:e8:
         52:8e:43:24:98:b4:5a:1f:5d:20:94:d5:a1:58:b2:9b:fb:77:
         49:37:90:b8:4a:e4:d0:25:1b:41:34:1d:3c:0b:71:6e:63:d0:
         74:f4:e2:12:d7:65:47:96:8c:c5:31:3d:f0:5c:76:3e:02:56:
         df:0f:39:60:bd:6d:21:c4:86:c7:a8:fc:67:91:d1:69:ff:91:
         25:50:66:72:9e:81:a0:27:60:c0:3d:73:90:30:3b:d0:8c:cc:
         10:29:3e:d9:21:cb:9e:e3:59:d7:08:e7:b1:2e:53:82:26:15:
         57:df:04:ac:b1:78:77:54:21:11:77:5e:71:c3:58:16:64:ed:
         7d:08:99:64:c9:8c:70:b0:c3:39:97:a4:38:00:e6:0a:aa:9b:
         c2:66:50:16:6a:ab:04:9d:50:a7:33:06:7b:9c:e0:82:5c:9f:
         81:9d:cd:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcEdPkWoDYWxo00JWdSjatPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMzIxMTM1NjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E4ZTg3OGJlYjc5OTFkOGMxOTdjNjM3ZDdhNDUzM2YxMGNlZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxcHm6RGDXXT55cR2xDNIT62c1t9
qc3+7srT1Z6hL7W+35DwSsZX9kbUUn+WHV2XV2057FJHD4LDSAdXvM7IIiFmztjr
c8zds9hUeN+0ZsWiLY8aC5D9GBObsqDHql1xpFJFHUAatYQ/ra5Md7mryOoa5ar4
6GWH2LeJmH1Pi9TjzwYgwaj9KfFkKgRLmqo1QG4XTXsdvIxcT8clOh90xblkLV4n
l22k8WtRqKgN8QpKN4TzYyih15P6P6W+cPE/l7SgfpOoWLu42M5y05CkFtEoxScm
niXWe3iWDZKOx1NpmziEeFF8TS8VDVh8lhX6I/ll1FoAhpnf3P3wrGEs6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOo6Hi+t5kdjBl8Y316RTPxDO4KMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNDZqb2VMNjNtUjJNR1h4amZYcEZNX0VNN2dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowV0MA0G
CSqGSIb3DQEBCwUAA4IBAQAVjRzcfNaMswwaN4y+4pTgNPcBt3xrvaYSeoAz+IHI
8McL0qOuH/DcVNMcclS2P6Q/S2agsw+/MvWcHZecQcilUUISYNpTmgQjOYDmb8EO
fRcgdaIFsUJTXehSjkMkmLRaH10glNWhWLKb+3dJN5C4SuTQJRtBNB08C3FuY9B0
9OIS12VHlozFMT3wXHY+AlbfDzlgvW0hxIbHqPxnkdFp/5ElUGZynoGgJ2DAPXOQ
MDvQjMwQKT7ZIcue41nXCOexLlOCJhVX3wSssXh3VCERd15xw1gWZO19CJlkyYxw
sMM5l6Q4AOYKqpvCZlAWaqsEnVCnMwZ7nOCCXJ+Bnc2/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org